@agentguard-run/spend 0.1.6 → 0.1.7

package/dist/cli/doctor.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `agentguard doctor` — check installation health and configuration.
+ */
+export declare function runDoctor(argv: string[]): Promise<number>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;GAEG;AA+FH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyF/D"}

package/dist/cli/doctor.js

@@ -0,0 +1,208 @@
+"use strict";
+/**
+ * `agentguard doctor` — check installation health and configuration.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDoctor = runDoctor;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const index_1 = require("../index");
+const colors_1 = require("./colors");
+function checkRequire(name) {
+    try {
+        const m = require(name);
+        const version = m.VERSION || m.version || '?';
+        return { ok: true, note: `v${version}` };
+    }
+    catch {
+        return { ok: false, note: 'not installed (optional)' };
+    }
+}
+function checkWritable(p) {
+    try {
+        fs.mkdirSync(p, { recursive: true });
+        const testFile = path.join(p, '.doctor-write-test');
+        fs.writeFileSync(testFile, 'ok');
+        fs.unlinkSync(testFile);
+        return { ok: true, note: p };
+    }
+    catch (e) {
+        return { ok: false, note: String(e) };
+    }
+}
+async function checkCrypto() {
+    try {
+        const ed = await Promise.resolve().then(() => __importStar(require('@noble/ed25519')));
+        const priv = new Uint8Array(32);
+        for (let i = 0; i < 32; i++)
+            priv[i] = i;
+        const pub = await ed.getPublicKeyAsync(priv);
+        if (pub.length === 32) {
+            return { ok: true, note: 'Ed25519 key derivation OK (32-byte public key)' };
+        }
+        return { ok: false, note: `unexpected public key size: ${pub.length}` };
+    }
+    catch (e) {
+        return { ok: false, note: `crypto backend failed: ${e}` };
+    }
+}
+async function checkDryRunBlock() {
+    try {
+        const { SpendGuard } = await Promise.resolve().then(() => __importStar(require('../spend-guard')));
+        const { InMemorySpendStore } = await Promise.resolve().then(() => __importStar(require('../store-memory')));
+        const { InMemoryDecisionLogStore } = await Promise.resolve().then(() => __importStar(require('../decision-log')));
+        const ed = await Promise.resolve().then(() => __importStar(require('@noble/ed25519')));
+        const privateKey = new Uint8Array(32);
+        for (let i = 0; i < 32; i++)
+            privateKey[i] = i;
+        const publicKey = await ed.getPublicKeyAsync(privateKey);
+        const policy = {
+            id: 'doctor-v1',
+            name: 'Doctor dry-run policy',
+            scope: { tenantId: 'doctor' },
+            caps: [
+                { amountCents: 0, window: 'per_day', action: 'block', reason: 'doctor check' },
+            ],
+            mode: 'enforce',
+            version: 1,
+            effectiveFrom: '2026-01-01T00:00:00.000Z',
+        };
+        const guard = new SpendGuard({
+            policy,
+            spendStore: new InMemorySpendStore(),
+            logStore: new InMemoryDecisionLogStore(),
+            signingKeys: { privateKey, publicKey },
+        });
+        const result = await guard.decide({
+            provider: 'openai',
+            model: 'gpt-4o',
+            inputTokens: 100,
+            outputTokens: 50,
+            scope: { tenantId: 'doctor', agentId: 'dry-run' },
+        });
+        if (result.decision?.action === 'block') {
+            return { ok: true, note: 'block path fires correctly' };
+        }
+        return {
+            ok: false,
+            note: `expected action=block, got action=${result.decision?.action}`,
+        };
+    }
+    catch (e) {
+        return { ok: false, note: `dry-run block failed: ${e}` };
+    }
+}
+async function runDoctor(argv) {
+    if (argv.includes('--help') || argv.includes('-h')) {
+        console.log('agentguard doctor');
+        return 0;
+    }
+    console.log('');
+    console.log('  ' + (0, colors_1.banner)(index_1.AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    console.log('  ' + (0, colors_1.cyanBold)('agentguard doctor') + (0, colors_1.dim)('  ·  setup health check'));
+    console.log('');
+    const checks = [];
+    // 1. Core package self-check
+    checks.push({
+        name: '@agentguard-run/spend package',
+        ok: true,
+        note: `v${index_1.AGENTGUARD_SPEND_VERSION}`,
+    });
+    // 2. Crypto
+    const cryptoCheck = await checkCrypto();
+    checks.push({ name: 'Ed25519 crypto backend', ...cryptoCheck });
+    // 3. Optional providers
+    for (const provider of ['openai', '@anthropic-ai/sdk', '@aws-sdk/client-bedrock-runtime']) {
+        const r = checkRequire(provider);
+        checks.push({ name: `provider: ${provider}`, ...r, optional: true });
+    }
+    // 4. ~/.agentguard writable
+    checks.push({
+        name: '~/.agentguard/ writable',
+        ...checkWritable(path.join(os.homedir(), '.agentguard')),
+    });
+    // 5. Policy file in cwd
+    const policyPath = path.join(process.cwd(), 'agentguard.policy.yaml');
+    if (fs.existsSync(policyPath)) {
+        checks.push({ name: 'policy file (cwd)', ok: true, note: `found: ${path.basename(policyPath)}` });
+    }
+    else {
+        checks.push({
+            name: 'policy file (cwd)',
+            ok: false,
+            note: `not found in ${path.basename(process.cwd())}/ — run 'agentguard init'`,
+        });
+    }
+    // 6. Dry-run block
+    const dryRun = await checkDryRunBlock();
+    checks.push({ name: 'dry-run block simulation', ...dryRun });
+    const labelWidth = Math.max(...checks.map((c) => c.name.length)) + 2;
+    let passCount = 0;
+    let optionalFailCount = 0;
+    let failCount = 0;
+    for (const c of checks) {
+        let mark;
+        if (c.ok) {
+            mark = (0, colors_1.green)('✓');
+            passCount++;
+        }
+        else if (c.optional) {
+            mark = (0, colors_1.dim)('·');
+            optionalFailCount++;
+        }
+        else {
+            mark = (0, colors_1.redBold)('✗');
+            failCount++;
+        }
+        console.log(`  ${mark} ${c.name.padEnd(labelWidth)}${(0, colors_1.dim)(c.note)}`);
+    }
+    console.log('');
+    console.log((0, colors_1.dim)('  ───────────────────────────────────────────'));
+    if (failCount === 0) {
+        console.log(`  ${(0, colors_1.greenBold)('healthy')}  ` +
+            (0, colors_1.dim)(`(${passCount} passing, ${optionalFailCount} optional providers not installed)`));
+        console.log('');
+        return 0;
+    }
+    console.log(`  ${(0, colors_1.redBold)('issues found')}  ` + (0, colors_1.dim)(`(${failCount} failing, ${passCount} passing)`));
+    console.log('');
+    console.log((0, colors_1.dim)("  fix the ✗ items above, then re-run 'agentguard doctor'."));
+    console.log('');
+    return 1;
+}
+//# sourceMappingURL=doctor.js.map

package/dist/cli/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+FH,8BAyFC;AAtLD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,oCAAoD;AACpD,qCAA4E;AAE5E,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACpD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;QAC9E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QACtD,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;QAC/D,MAAM,EAAE,wBAAwB,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;QACrE,MAAM,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAQ;YAClB,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAC7B,IAAI,EAAE;gBACJ,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE;aAC/E;YACD,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,0BAA0B;SAC1C,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC;YAC3B,MAAM;YACN,UAAU,EAAE,IAAI,kBAAkB,EAAE;YACpC,QAAQ,EAAE,IAAI,wBAAwB,EAAE;YACxC,WAAW,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;SACvC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YAChC,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,GAAG;YAChB,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;SAC3C,CAAC,CAAC;QAEV,IAAK,MAAc,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qCAAsC,MAAc,CAAC,QAAQ,EAAE,MAAM,EAAE;SAC9E,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,EAAE,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,iBAAQ,EAAC,mBAAmB,CAAC,GAAG,IAAA,YAAG,EAAC,yBAAyB,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAGhB,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,6BAA6B;IAC7B,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,+BAA+B;QACrC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,IAAI,gCAAwB,EAAE;KACrC,CAAC,CAAC;IAEH,YAAY;IACZ,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAC;IACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAEhE,wBAAwB;IACxB,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,EAAE,CAAC;QAC1F,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,QAAQ,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,yBAAyB;QAC/B,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;KACzD,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;IACtE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,IAAI,GAAG,IAAA,cAAK,EAAC,GAAG,CAAC,CAAC;YAClB,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtB,IAAI,GAAG,IAAA,YAAG,EAAC,GAAG,CAAC,CAAC;YAChB,iBAAiB,EAAE,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAA,gBAAO,EAAC,GAAG,CAAC,CAAC;YACpB,SAAS,EAAE,CAAC;QACd,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAA,YAAG,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,+CAA+C,CAAC,CAAC,CAAC;IAClE,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CACT,KAAK,IAAA,kBAAS,EAAC,SAAS,CAAC,IAAI;YAC3B,IAAA,YAAG,EAAC,IAAI,SAAS,aAAa,iBAAiB,oCAAoC,CAAC,CACvF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,gBAAO,EAAC,cAAc,CAAC,IAAI,GAAG,IAAA,YAAG,EAAC,IAAI,SAAS,aAAa,SAAS,WAAW,CAAC,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,2DAA2D,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/explain.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `agentguard explain` — decode a signed receipt with cap math + signature breakdown.
+ */
+export declare function runExplain(argv: string[]): Promise<number>;
+//# sourceMappingURL=explain.d.ts.map

package/dist/cli/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/cli/explain.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoCH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA6GhE"}

package/dist/cli/explain.js

@@ -0,0 +1,172 @@
+"use strict";
+/**
+ * `agentguard explain` — decode a signed receipt with cap math + signature breakdown.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runExplain = runExplain;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const index_1 = require("../index");
+const colors_1 = require("./colors");
+const DEMO_RECEIPT = path.join(os.homedir(), '.agentguard', 'demo', 'latest-receipt.json');
+const WINDOW_LABELS = {
+    per_call: 'per call',
+    per_minute: 'per minute',
+    per_hour: 'per hour',
+    per_day: 'per day',
+    per_month: 'per month',
+};
+const WINDOW_RESETS = {
+    per_call: 'next call',
+    per_minute: 'top of next minute (UTC)',
+    per_hour: 'top of next hour (UTC)',
+    per_day: 'UTC midnight',
+    per_month: '1st of next month (UTC)',
+};
+function formatCents(cents) {
+    const sign = cents < 0 ? '-' : '';
+    const abs = Math.abs(Math.round(cents));
+    const dollars = Math.floor(abs / 100);
+    const remainder = abs % 100;
+    const dollarsStr = dollars.toLocaleString('en-US');
+    const remainderStr = String(remainder).padStart(2, '0');
+    return `${sign}$${dollarsStr}.${remainderStr}`;
+}
+async function runExplain(argv) {
+    if (argv.includes('--help') || argv.includes('-h')) {
+        console.log('agentguard explain [latest|<path>]');
+        return 0;
+    }
+    const receiptArg = argv.find((a) => !a.startsWith('-')) || 'latest';
+    console.log('');
+    console.log('  ' + (0, colors_1.banner)(index_1.AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    console.log('  ' + (0, colors_1.cyanBold)(`agentguard explain ${receiptArg}`));
+    console.log('');
+    let source;
+    if (receiptArg === 'latest') {
+        if (!fs.existsSync(DEMO_RECEIPT)) {
+            console.log('  ' + (0, colors_1.redBold)('error: ') + 'no demo receipt found.');
+            console.log(`  run ${(0, colors_1.greenBold)('agentguard demo')} first to produce a receipt.`);
+            console.log('');
+            return 2;
+        }
+        source = DEMO_RECEIPT;
+    }
+    else {
+        source = path.resolve(receiptArg.replace(/^~/, os.homedir()));
+        if (!fs.existsSync(source)) {
+            console.log('  ' + (0, colors_1.redBold)('error: ') + `receipt file not found: ${source}`);
+            console.log('');
+            return 2;
+        }
+    }
+    const raw = JSON.parse(fs.readFileSync(source, 'utf-8'));
+    const decision = raw.decision;
+    const cap = decision.triggeredCap;
+    const agentId = String(decision.triggeredScopeKey || 'unknown')
+        .split('|')
+        .pop()
+        .replace('agentId=', '');
+    // 1. What happened
+    console.log((0, colors_1.dim)('  what happened'));
+    console.log((0, colors_1.dim)('  ─────────────'));
+    const action = decision.action || '?';
+    const colorAction = action === 'block'
+        ? (0, colors_1.redBold)(action.toUpperCase())
+        : action === 'downgrade'
+            ? (0, colors_1.yellow)(action.toUpperCase())
+            : (0, colors_1.green)(action.toUpperCase());
+    console.log(`  action      ${colorAction}`);
+    console.log(`  agent       ${agentId}`);
+    console.log(`  provider    ${decision.provider || '?'}`);
+    console.log(`  model       ${decision.modelRequested || '?'}`);
+    console.log('');
+    // 2. Cap math
+    console.log((0, colors_1.dim)('  cap math'));
+    console.log((0, colors_1.dim)('  ────────'));
+    const projected = decision.projectedCents || 0;
+    const windowBefore = decision.windowSpendBefore || 0;
+    console.log(`  this call would have cost   ${(0, colors_1.greenBold)(formatCents(projected))}`);
+    console.log(`  spent in window before      ${formatCents(windowBefore)}`);
+    if (cap) {
+        const capCents = cap.amountCents || 0;
+        const window = cap.window || '?';
+        const windowLabel = WINDOW_LABELS[window] || window;
+        const remaining = Math.max(0, capCents - windowBefore);
+        const overBy = Math.max(0, projected - remaining);
+        console.log(`  cap                         ${(0, colors_1.redBold)(formatCents(capCents))} ${(0, colors_1.dim)(windowLabel)}`);
+        console.log(`  remaining in window         ${formatCents(remaining)}`);
+        if (overBy > 0)
+            console.log(`  call exceeds remaining by   ${(0, colors_1.redBold)(formatCents(overBy))}`);
+        const saved = Math.max(0, projected - remaining);
+        if (saved > 0)
+            console.log(`  amount saved by block       ${(0, colors_1.greenBold)('+' + formatCents(saved))}`);
+        console.log('');
+        console.log((0, colors_1.dim)('  what unblocks'));
+        console.log((0, colors_1.dim)('  ─────────────'));
+        const reset = WINDOW_RESETS[window] || 'next window boundary';
+        console.log(`  window resets at  ${(0, colors_1.greenBold)(reset)}`);
+        if (cap.downgradeTo)
+            console.log(`  downgrade target  ${(0, colors_1.greenBold)(cap.downgradeTo)}`);
+        console.log('');
+    }
+    // 3. Cryptographic receipt
+    console.log((0, colors_1.dim)('  cryptographic receipt'));
+    console.log((0, colors_1.dim)('  ─────────────────────'));
+    console.log(`  sequence       ${raw.sequence ?? '?'}`);
+    console.log(`  entry hash     ${String(raw.entryHash || '?').slice(0, 48)}${(0, colors_1.dim)('...')}`);
+    console.log(`  prev hash      ${String(raw.previousHash || '?').slice(0, 48)}${(0, colors_1.dim)('...')}`);
+    console.log(`  signer (fp)    ${String(raw.signerFingerprint || '?').slice(0, 32)}${(0, colors_1.dim)('...')}`);
+    const signature = String(raw.signature || '');
+    console.log(`  signature      ${signature.slice(0, 48)}${signature.length > 48 ? (0, colors_1.dim)('...') : ''}`);
+    console.log('');
+    console.log(`  ${(0, colors_1.dim)('to verify cryptographically:')} ${(0, colors_1.greenBold)('agentguard verify --trace latest')}`);
+    console.log('');
+    // 4. Policy
+    console.log((0, colors_1.dim)('  policy'));
+    console.log((0, colors_1.dim)('  ──────'));
+    console.log(`  id        ${decision.policyId || '?'}`);
+    console.log(`  version   ${decision.policyVersion || '?'}`);
+    console.log(`  mode      ${decision.enforcementMode || '?'}`);
+    const reasons = decision.reasons || [];
+    if (reasons.length > 0)
+        console.log(`  reasons   ${reasons.join('; ')}`);
+    console.log('');
+    return 0;
+}
+//# sourceMappingURL=explain.js.map

package/dist/cli/explain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.js","sourceRoot":"","sources":["../../src/cli/explain.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCH,gCA6GC;AA/ID,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,oCAAoD;AACpD,qCAAoF;AAEpF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;AAE3F,MAAM,aAAa,GAA2B;IAC5C,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,0BAA0B;IACtC,QAAQ,EAAE,wBAAwB;IAClC,OAAO,EAAE,cAAc;IACvB,SAAS,EAAE,yBAAyB;CACrC,CAAC;AAEF,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,GAAG,GAAG,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,GAAG,IAAI,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC;AACjD,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;IAEpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,iBAAQ,EAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAc,CAAC;IACnB,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,gBAAO,EAAC,SAAS,CAAC,GAAG,wBAAwB,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAA,kBAAS,EAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,YAAY,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,gBAAO,EAAC,SAAS,CAAC,GAAG,2BAA2B,MAAM,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,IAAI,SAAS,CAAC;SAC5D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,EAAG;SACN,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE3B,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,iBAAiB,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,iBAAiB,CAAC,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC;IACtC,MAAM,WAAW,GACf,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC,IAAA,gBAAO,EAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,CAAC,CAAC,MAAM,KAAK,WAAW;YACtB,CAAC,CAAC,IAAA,eAAM,EAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC9B,CAAC,CAAC,IAAA,cAAK,EAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAW,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,cAAc,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,cAAc;IACd,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,YAAY,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,YAAY,CAAC,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,QAAQ,CAAC,iBAAiB,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAA,kBAAS,EAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,iCAAiC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAE1E,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;QACjC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAA,gBAAO,EAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAA,YAAG,EAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,iCAAiC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAA,gBAAO,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAA,kBAAS,EAAC,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,iBAAiB,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,iBAAiB,CAAC,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAA,kBAAS,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAA,kBAAS,EAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,2BAA2B;IAC3B,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,yBAAyB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,yBAAyB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAA,YAAG,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAA,YAAG,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAA,YAAG,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,IAAA,YAAG,EAAC,8BAA8B,CAAC,IAAI,IAAA,kBAAS,EAAC,kCAAkC,CAAC,EAAE,CAC5F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,YAAY;IACZ,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,UAAU,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,UAAU,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,eAAe,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAa,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/init.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `agentguard init` — scaffold a project to use AgentGuard Spend.
+ */
+export declare function runInit(argv: string[]): Promise<number>;
+//# sourceMappingURL=init.d.ts.map

package/dist/cli/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA;;GAEG;AAuGH,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA2E7D"}

package/dist/cli/init.js

@@ -0,0 +1,208 @@
+"use strict";
+/**
+ * `agentguard init` — scaffold a project to use AgentGuard Spend.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runInit = runInit;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const index_1 = require("../index");
+const colors_1 = require("./colors");
+const POLICY_TEMPLATE = (now) => `# AgentGuard Spend policy (generated by \`agentguard init\`)
+# All amounts are integer cents. 500 = $5.00.
+id: my-default-policy-v1
+name: My default AgentGuard policy
+version: 1
+effectiveFrom: "${now}"
+mode: enforce
+
+scope:
+  tenantId: my-tenant
+
+caps:
+  # Soft daily cap: when $5/day reached, downgrade to a cheaper model.
+  - amountCents: 500
+    window: per_day
+    action: downgrade
+    downgradeTo: gpt-4o-mini
+    reason: "Soft daily cap reached, routing to gpt-4o-mini"
+
+  # Hard daily ceiling: at $20/day, block the call.
+  - amountCents: 2000
+    window: per_day
+    action: block
+    reason: "Hard daily ceiling ($20/day)"
+
+  # Per-minute burst guard: catches runaway loops.
+  - amountCents: 200
+    window: per_minute
+    action: block
+    reason: "Per-minute burst guard ($2/min)"
+`;
+const QUICKSTART_TEMPLATE = `/**
+ * AgentGuard Spend quickstart (generated by \`agentguard init\`).
+ *
+ * Run after \`npm install @agentguard-run/spend openai\`:
+ *     node agentguard_quickstart.js
+ */
+import OpenAI from 'openai';
+import {
+  withSpendGuard,
+  AgentGuardBlockedError,
+  type SpendPolicy,
+} from '@agentguard-run/spend';
+import { randomBytes } from 'crypto';
+
+const policy: SpendPolicy = {
+  id: 'my-default-policy-v1',
+  name: 'My default AgentGuard policy',
+  scope: { tenantId: 'my-tenant' },
+  caps: [
+    {
+      amountCents: 500,
+      window: 'per_day',
+      action: 'downgrade',
+      downgradeTo: 'gpt-4o-mini',
+      reason: 'Soft daily cap reached, routing to gpt-4o-mini',
+    },
+    {
+      amountCents: 2000,
+      window: 'per_day',
+      action: 'block',
+      reason: 'Hard daily ceiling (\$20/day)',
+    },
+  ],
+  mode: 'enforce',
+  version: 1,
+  effectiveFrom: '${new Date().toISOString()}',
+};
+
+const privateKey = new Uint8Array(randomBytes(32));
+
+const client = withSpendGuard(new OpenAI(), {
+  policy,
+  scope: { tenantId: 'my-tenant', agentId: 'my-first-agent' },
+  config: {
+    policy,
+    signingKeys: { privateKey, publicKey: new Uint8Array(32) },
+  },
+});
+
+try {
+  const response = await client.chat.completions.create({
+    model: 'gpt-4o',
+    messages: [{ role: 'user', content: 'Hello from AgentGuard!' }],
+  });
+  console.log(response.choices[0].message.content);
+} catch (err) {
+  if (err instanceof AgentGuardBlockedError) {
+    console.error(err.message);
+  } else {
+    throw err;
+  }
+}
+`;
+async function runInit(argv) {
+    const force = argv.includes('--force');
+    const policyOnly = argv.includes('--policy-only');
+    if (argv.includes('--help') || argv.includes('-h')) {
+        console.log('agentguard init [--force] [--policy-only]');
+        return 0;
+    }
+    const cwd = process.cwd();
+    const policyPath = path.join(cwd, 'agentguard.policy.yaml');
+    const quickstartPath = path.join(cwd, 'agentguard_quickstart.ts');
+    const gitignorePath = path.join(cwd, '.gitignore');
+    console.log('');
+    console.log('  ' + (0, colors_1.banner)(index_1.AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    console.log('  ' + (0, colors_1.cyanBold)('agentguard init') + (0, colors_1.dim)('  ·  scaffold a project'));
+    console.log('');
+    const created = [];
+    const skipped = [];
+    if (fs.existsSync(policyPath) && !force) {
+        skipped.push([path.basename(policyPath), 'already exists (use --force to overwrite)']);
+    }
+    else {
+        const now = new Date().toISOString();
+        fs.writeFileSync(policyPath, POLICY_TEMPLATE(now));
+        created.push(path.basename(policyPath));
+    }
+    if (!policyOnly) {
+        if (fs.existsSync(quickstartPath) && !force) {
+            skipped.push([path.basename(quickstartPath), 'already exists (use --force to overwrite)']);
+        }
+        else {
+            fs.writeFileSync(quickstartPath, QUICKSTART_TEMPLATE);
+            created.push(path.basename(quickstartPath));
+        }
+    }
+    let gitignoreModified = false;
+    if (fs.existsSync(gitignorePath)) {
+        const existing = fs.readFileSync(gitignorePath, 'utf-8');
+        if (!existing.includes('.agentguard')) {
+            const prefix = existing.endsWith('\n') ? '' : '\n';
+            fs.appendFileSync(gitignorePath, prefix + '.agentguard/\n');
+            gitignoreModified = true;
+        }
+    }
+    else {
+        fs.writeFileSync(gitignorePath, '.agentguard/\n');
+        gitignoreModified = true;
+        created.push('.gitignore');
+    }
+    for (const p of created)
+        console.log(`  ${(0, colors_1.green)('+ created')}  ${p}`);
+    if (gitignoreModified && !created.includes('.gitignore')) {
+        console.log(`  ${(0, colors_1.green)('~ updated')}  .gitignore  ${(0, colors_1.dim)('(added .agentguard/)')}`);
+    }
+    for (const [p, reason] of skipped) {
+        console.log(`  ${(0, colors_1.yellow)('= skipped')}  ${p}  ${(0, colors_1.dim)('(' + reason + ')')}`);
+    }
+    if (created.length === 0 && !gitignoreModified) {
+        console.log(`  ${(0, colors_1.yellow)('nothing to do')}  ${(0, colors_1.dim)('all files exist; pass --force to overwrite')}`);
+        return 0;
+    }
+    console.log('');
+    console.log((0, colors_1.dim)('  ───────────────────────────────────────────'));
+    console.log(`  ${(0, colors_1.dim)('next:')}`);
+    console.log(`    1. edit ${(0, colors_1.greenBold)('agentguard.policy.yaml')} to set your caps`);
+    console.log(`    2. ${(0, colors_1.greenBold)('node agentguard_quickstart.js')}  ${(0, colors_1.dim)('to see it in action')}`);
+    console.log(`    3. ${(0, colors_1.greenBold)('agentguard doctor')}  ${(0, colors_1.dim)('to verify your setup')}`);
+    console.log('');
+    return 0;
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuGH,0BA2EC;AAhLD,uCAAyB;AACzB,2CAA6B;AAC7B,oCAAoD;AACpD,qCAA2E;AAE3E,MAAM,eAAe,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC;;;;;kBAKvB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBpB,CAAC;AAEF,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAmCR,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2B3C,CAAC;AAEK,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAElD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAEnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,iBAAQ,EAAC,iBAAiB,CAAC,GAAG,IAAA,YAAG,EAAC,yBAAyB,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,2CAA2C,CAAC,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,2CAA2C,CAAC,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;YAC5D,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAClD,iBAAiB,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,cAAK,EAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,iBAAiB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,cAAK,EAAC,WAAW,CAAC,iBAAiB,IAAA,YAAG,EAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,eAAM,EAAC,WAAW,CAAC,KAAK,CAAC,KAAK,IAAA,YAAG,EAAC,GAAG,GAAG,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,eAAM,EAAC,eAAe,CAAC,KAAK,IAAA,YAAG,EAAC,4CAA4C,CAAC,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,+CAA+C,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,YAAG,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAA,kBAAS,EAAC,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,UAAU,IAAA,kBAAS,EAAC,+BAA+B,CAAC,KAAK,IAAA,YAAG,EAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACnG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAA,kBAAS,EAAC,mBAAmB,CAAC,KAAK,IAAA,YAAG,EAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAuBH,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlF"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6BH,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAqClF"}

package/dist/cli/main.js

@@ -52,12 +52,18 @@ usage:
 commands:
   demo              Run a deterministic simulation with a real cryptographic receipt.
   verify            Verify a signed AgentGuard receipt.
+  init              Scaffold a project (policy.yaml + quickstart + .gitignore).
+  doctor            Check installation health and configuration.
+  explain           Decode a signed receipt with cap math + signature breakdown.
   --version         Show the installed SDK version.
   --help            Show this help.
 
 examples:
+  agentguard init
+  agentguard doctor
   agentguard demo
   agentguard verify --trace latest
+  agentguard explain latest
 
 docs:    https://agentguard.run
 install: pip install agentguard-spend  /  npm install @agentguard-run/spend
@@ -81,6 +87,18 @@ async function main(argv = process.argv.slice(2)) {
         const { runVerify } = await Promise.resolve().then(() => __importStar(require('./verify')));
         return runVerify(rest);
     }
+    if (command === 'init') {
+        const { runInit } = await Promise.resolve().then(() => __importStar(require('./init')));
+        return runInit(rest);
+    }
+    if (command === 'doctor') {
+        const { runDoctor } = await Promise.resolve().then(() => __importStar(require('./doctor')));
+        return runDoctor(rest);
+    }
+    if (command === 'explain') {
+        const { runExplain } = await Promise.resolve().then(() => __importStar(require('./explain')));
+        return runExplain(rest);
+    }
     process.stderr.write(`agentguard: unknown command '${command}'\n\n`);
     process.stderr.write(HELP);
     return 2;

package/dist/cli/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBH,oBAyBC;AA9CD,oCAAoD;AAEpD,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;CAiBZ,CAAC;AAEK,KAAK,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,cAAc,gCAAwB,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,OAAO,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8CAA8C;AAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,GAAG,EAAE,EAAE;QACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BH,oBAqCC;AAhED,oCAAoD;AAEpD,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBZ,CAAC;AAEK,KAAK,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,cAAc,gCAAwB,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,UAAU,EAAE,GAAG,wDAAa,WAAW,GAAC,CAAC;QACjD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,OAAO,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8CAA8C;AAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,GAAG,EAAE,EAAE;QACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -12,7 +12,7 @@ export { canonicalJson, sha256Hex, computeEntryHash, computeSignerFingerprint, s
 export { InMemorySpendStore } from './store-memory';
 export { SpendGuard, withSpendGuard, AgentGuardBlockedError, type SpendGuardConfig, type OpenAIBindingOptions, } from './spend-guard';
 export { DEFAULT_LOCALE, SUPPORTED_LOCALES, TRANSLATIONS, type SupportedLocale, resolveLocale, t, formatBlockedTrace, type BlockedTraceArgs, } from './i18n';
-export declare const AGENTGUARD_SPEND_VERSION = "0.1.6";
+export declare const AGENTGUARD_SPEND_VERSION = "0.1.7";
 /** Patent marking. 35 U.S.C. § 287 constructive notice. */
 export declare const PATENT_NOTICE: string;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -46,7 +46,7 @@ Object.defineProperty(exports, "TRANSLATIONS", { enumerable: true, get: function
 Object.defineProperty(exports, "resolveLocale", { enumerable: true, get: function () { return i18n_1.resolveLocale; } });
 Object.defineProperty(exports, "t", { enumerable: true, get: function () { return i18n_1.t; } });
 Object.defineProperty(exports, "formatBlockedTrace", { enumerable: true, get: function () { return i18n_1.formatBlockedTrace; } });
-exports.AGENTGUARD_SPEND_VERSION = '0.1.6';
+exports.AGENTGUARD_SPEND_VERSION = '0.1.7';
 /** Patent marking. 35 U.S.C. § 287 constructive notice. */
 exports.PATENT_NOTICE = 'Protected by U.S. patent-pending technology ' +
     '(App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626; ' +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentguard-run/spend",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Local-runtime spend caps and capability-gated model routing for AI agents. Prompts, API keys, and signing keys stay inside the customer runtime. Zero data plane involvement.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",